The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the campaign has been active since... Weiterlesen: Lazarus Abuses South Korean Security Software to Deploy Malware Using…
Intelligence View
⚡ tsecurity.de Intelligence
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
14 sources
CVE-2026-29136 | SEPPmail Secure Email Gateway up to 15.0.2 Notification cross site scripting
13 more sources
VVulDB Updates1 hour agoCVE-2026-29131 | SEPPmail Secure Email Gateway up to 15.0.2 ldap injection VVulDB Updates1 hour agoCVE-2026-29135 | SEPPmail Secure Email Gateway up to 15.0.2 password-tag input validation VVulDB Updates1 hour agoCVE-2026-29133 | SEPPmail Secure Email Gateway up to 15.0.2 PGP Key input validation VVulDB Updates1 hour agoCVE-2026-29134 | SEPPmail Secure Email Gateway up to 15.0.2 GINA Webdomain Metadata reliance on untrusted inputs in a security decision VVulDB Updates1 hour agoCVE-2026-29132 | SEPPmail Secure Email Gateway up to 15.0.2 missing authentication VVulDB Updates24 min. agoCVE-2026-29140 | SEPPmail Secure Email Gateway up to 15.0.2 Certificate certificate validation
+7
13 sources
CVE-2026-34749 | payloadcms payload up to 3.79.0 cross-site request forgery (GHSA-p6mr-xf3r-ghq4)
12 more sources
VVulDB Updates3 hours agoCVE-2026-34748 | payloadcms payload up to 3.77.x cross site scripting (GHSA-mmxc-95ch-2j7c) VVulDB Updates3 hours agoCVE-2026-34747 | payloadcms payload up to 3.79.0 sql injection (GHSA-7xxh-373w-35vg) VVulDB Updates2 hours agoCVE-2026-34559 | ci4-cms-erp ci4ms 0.28.5.0 tag name cross site scripting (GHSA-4333-387x-w245) VVulDB Updates2 hours agoCVE-2026-34566 | ci4-cms-erp ci4ms 0.28.5.0 cross site scripting (GHSA-458r-h248-29c5) VVulDB Updates2 hours agoCVE-2026-34571 | ci4-cms-erp ci4ms 0.28.5.0 Administrative Interface cross site scripting (GHSA-fc4p-p49v-r948) VVulDB Updates2 hours agoCVE-2026-34569 | ci4-cms-erp ci4ms 0.28.5.0 category title cross site scripting (GHSA-fhrf-q333-82fm)
+6
11 sources
ZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
10 more sources
ZZDI: Published Advisories12 hours agoZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability ZZDI: Published Advisories12 hours agoZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability ZZDI: Published Advisories12 hours agoZDI-26-827: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability ZZDI: Published Advisories12 hours agoZDI-26-826: (0Day) (Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability ZZDI: Published Advisories12 hours agoZDI-26-825: (0Day) (Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability ZZDI: Published Advisories12 hours agoZDI-26-823: (0Day) (Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4300762/cyber-security-bulletins/lazarus-abuses-south-korean-security-software-to-deploy-malware-using-post-quantum-encryption/